add LoginFilter(without url-mapping in xml)